This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RMBSyeyKHFjUMsWhWi9eDQXEN-Y.roa File: RMBSyeyKHFjUMsWhWi9eDQXEN-Y.roa (raw, json) Hash identifier: BM27ZFyZORsrzhnBJdY5zgfJ7o36kvLhU1UdpAvW2j0= Subject key identifier: 44:C0:52:C9:EC:8A:1C:58:D4:32:C5:A1:5A:2F:5E:0D:05:C4:37:E6 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC67B9EED470331528B717430668D0 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RMBSyeyKHFjUMsWhWi9eDQXEN-Y.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 185.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:67:b9:ee:d4:70:33:15:28:b7:17:43:06:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c052c9ec8a1c58d432c5a15a2f5e0d05c437e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:4c:55:2d:63:87:f8:77:71:31:a5:35:e0: d8:f0:41:9a:ff:00:63:bb:33:c7:fa:75:ed:d5:2d: c5:27:e4:89:4c:9a:d0:c5:80:9a:98:6e:6c:6d:e0: 23:e7:c9:15:c2:0e:7d:4b:d3:df:87:a9:ab:38:1f: fa:eb:2a:3c:99:e3:65:45:36:e4:70:d7:12:10:56: 3d:22:dc:9f:f8:f1:ea:0f:c4:29:4e:39:96:dc:d1: 43:79:31:2b:55:45:3c:72:02:b2:ce:f8:b5:ec:b4: 59:2d:f8:6c:b7:2f:3a:00:55:b1:cb:59:26:e4:e8: f5:64:24:2f:97:f9:84:cd:e8:43:c1:8f:0b:d6:0e: 74:b5:08:2b:8e:e1:2a:7a:13:5d:be:83:f6:a5:b5: 04:de:1a:1d:f4:d6:a3:11:d7:a2:ab:3f:95:73:0f: 66:6c:b1:f6:50:d1:b7:22:af:99:13:cd:2d:84:24: db:32:03:32:d5:4a:27:b1:01:40:a9:67:c7:bc:3d: 31:35:bd:07:33:cb:10:d3:26:af:33:8c:2b:78:42: 62:53:ad:3e:9b:92:7c:76:65:56:fb:58:63:3d:37: 1b:60:36:c5:15:ac:a8:fa:0e:8a:ee:60:d0:1b:7a: 79:06:9f:0c:93:01:07:61:18:a9:d8:64:ca:f9:0b: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C0:52:C9:EC:8A:1C:58:D4:32:C5:A1:5A:2F:5E:0D:05:C4:37:E6 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RMBSyeyKHFjUMsWhWi9eDQXEN-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.220.0/24 Signature Algorithm: sha256WithRSAEncryption 61:78:34:61:92:ea:3a:9b:ea:81:65:23:e9:d7:3d:22:29:72: 1e:c8:a8:cf:d0:fd:d6:ad:29:e7:25:fa:b1:a7:1c:1a:a4:25: e8:cb:7b:f0:9a:09:66:21:65:a5:5d:1b:2a:ae:7a:43:7d:4e: 2d:6b:31:b8:4c:ad:ad:47:b5:a6:19:ad:6e:bf:ea:0d:d0:51: 27:e5:ce:15:4e:54:d8:19:f3:0a:6d:d6:47:c5:e5:84:de:95: 03:ee:80:8d:05:9d:73:a0:90:46:cb:1c:81:30:fb:62:78:c3: 68:52:13:2d:2b:69:4c:c8:3f:c4:b2:2a:45:57:9e:a4:0b:52: 73:62:20:0a:67:7b:df:82:d3:53:72:5e:e5:86:0f:7d:70:dc: 06:2f:32:0b:fe:0c:19:0c:08:ed:1c:1a:f8:7c:1e:1e:f0:ed: 83:d0:d2:09:08:0b:36:b5:63:3b:d0:b9:b5:3c:1c:3b:5f:ef: 90:e6:67:d0:86:50:a7:66:94:8d:bd:31:3a:ad:5c:7e:73:f8: 84:1c:73:9d:dd:9e:34:0a:d0:5a:22:17:1d:f1:f7:bb:4a:2b: c2:8e:89:ac:98:10:a1:15:65:2a:5c:20:89:36:20:6f:d9:ac: 7a:83:eb:ce:4a:5b:ac:55:13:4b:d5:38:53:b8:74:76:b0:64: 71:10:58:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ge57tRwMxUotxdDBmjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGMwNTJjOWVjOGExYzU4ZDQzMmM1YTE1YTJmNWUwZDA1YzQzN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wVMVS1jh/h3cTGlNeDY8EGa/wBj uzPH+nXt1S3FJ+SJTJrQxYCamG5sbeAj58kVwg59S9Pfh6mrOB/66yo8meNlRTbk cNcSEFY9Ityf+PHqD8QpTjmW3NFDeTErVUU8cgKyzvi17LRZLfhsty86AFWxy1km 5Oj1ZCQvl/mEzehDwY8L1g50tQgrjuEqehNdvoP2pbUE3hod9NajEdeiqz+Vcw9m bLH2UNG3Iq+ZE80thCTbMgMy1UonsQFAqWfHvD0xNb0HM8sQ0yavM4wreEJiU60+ m5J8dmVW+1hjPTcbYDbFFayo+g6K7mDQG3p5Bp8MkwEHYRip2GTK+QvMRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETAUsnsihxY1DLFoVovXg0FxDfmMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvUk1CU3lleUtIRmpVTXNXaFdpOWVEUVhFTi1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXcMA0G CSqGSIb3DQEBCwUAA4IBAQBheDRhkuo6m+qBZSPp1z0iKXIeyKjP0P3WrSnnJfqx pxwapCXoy3vwmglmIWWlXRsqrnpDfU4tazG4TK2tR7WmGa1uv+oN0FEn5c4VTlTY GfMKbdZHxeWE3pUD7oCNBZ1zoJBGyxyBMPtieMNoUhMtK2lMyD/EsipFV56kC1Jz YiAKZ3vfgtNTcl7lhg99cNwGLzIL/gwZDAjtHBr4fB4e8O2D0NIJCAs2tWM70Lm1 PBw7X++Q5mfQhlCnZpSNvTE6rVx+c/iEHHOd3Z40CtBaIhcd8fe7SivCjomsmBCh FWUqXCCJNiBv2ax6g+vOSlusVRNL1ThTuHR2sGRxEFjG -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:28 2026 by rpki-client